Vulnerabilities > Novell > Groupwise > Critical

DATE CVE VULNERABILITY TITLE RISK
2008-05-02 CVE-2008-2069 Buffer Errors vulnerability in Novell Groupwise 7.0
Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via a long argument in a mailto: URI.
network
novell CWE-119
critical
9.3
2007-12-18 CVE-2007-6435 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Novell Groupwise
Stack-based buffer overflow in Novell GroupWise before 6.5.7, when HTML preview of e-mail is enabled, allows user-assisted remote attackers to execute arbitrary code via a long SRC attribute in an IMG element when forwarding or replying to a crafted e-mail.
network
novell CWE-119
critical
9.3
2007-04-24 CVE-2007-2171 Remote Buffer Overflow vulnerability in Novell Groupwise 7.0
Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote attackers to execute arbitrary code via long base64 content in an HTTP Basic Authentication request.
network
low complexity
novell
critical
10.0
2003-12-31 CVE-2003-1551 Malicious Script vulnerability in Novell GroupWise WebAccess
Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors related to "malicious script."
network
low complexity
novell
critical
10.0